• Stars
    star
    114
  • Rank 307,967 (Top 7 %)
  • Language
    Python
  • License
    Other
  • Created over 8 years ago
  • Updated 3 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Management UI for strongSwan

Build Status Coverage Status

strongMan

strongMan is a management interface for strongSwan. Based on Django and Python, strongMan provides a user friendly graphical interface to configure and establish IPsec connections. It supports

  • RSA / ECDSA asymmetric encryption
  • EAP with username and password
  • EAP-TLS
  • serveral authentification rounds

The strongMan application implements a persistent connection and asymmetric key management. Several common connection use cases are implemented and can be used in few configuration steps.

Run it directly from git repository

Requirements:

Run the following commands to install strongMan.

git clone https://github.com/strongswan/strongMan.git
cd strongMan
sudo ./setup.py install

We have installed strongMan with all it's requirements in a virtual environment and loaded a default user into the database.

Configuration Loader

To guarantee data consistency between strongMan and strongSwan, configure a script in the strongSwan configuration, which will be executed on the startup of strongSwan.

Option 1

If you aren’t planning on setting up a systemd service, do the following: Put these lines into in "/etc/strongswan.d/strongMan.conf". Replace ’pathTostrongMan’ with the path, where you installed strongMan.

charon {
  start-scripts {
    strongman = /pathTostrongMan/configloader.py
  }
}
Option 2

If you will configure strongMan with a systemd service, follow these instructions to get the Configuration Loader running. Put the following line into "strongswan-swanctl.service". Replace "pathTostrongMan" with the path, where you installed strongMan.

ExecStartPost=/pathTostrongMan/configloader.py

Run

Now we can start the strongMan server.

sudo ./run.py

The server is now accessible on http://localhost:1515 Username: John, Password: Lennon@1940

Add a systemd service

If you want to run strongMan permanently in the background you can install strongMan as a systemd service.

sudo ./setup.py add-service # Adds the service and additionally a launcher icon

Remove service

Removes the service and the launcher icon

sudo ./setup.py remove-service